Design approach that integrates security from the early stages of software and infrastructure development, rather than adding it later. Includes threat modeling, least privilege principles, defense in depth, fail-safe defaults, and privilege separation as architectural foundations. Reduces attack surface and remediation costs through conscious design choices.